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THIRD PERIOD 



COMMUNICATIONS SECURITY 



Ls period will -be^ devoted, .to the subject -o£ -communications 



^BecxtcJUgCy + rn ' n Jw-eetectaltshed and 'TSairrtained . 

^jsu^uaJL 

Three- four years ago there was being hammered into our ears over the 

radio in Washington a slogan concerned with automobile traffic safety. The 

* ’ • * „ 

* * *7 -S- 

> - t * t 

slogan was: "Don't learn your traffic laws by accident." I think the slogan 

,dvu Cbm\)ti\CfFloti$ SECUavTT> 

useful as a sub-title for, my talk .but I'll modify it a little — "Don't learn 

r A 

-<riJ 

your COMSEC laws by accident." I -begin ay. talk- by reading the Webster 



Diebionary^Ctefinition of the word "accident". I know, of course, that 



only a few of you will ever be directly concerned with COMSEC duties, but as 



at, Lcttev 



potential future commanders of fighting units *he definition of the word 



VWOLhM ‘ 
initfon 



"accident" should be of 






interest in connection with 



; =eaid- in 



a.jaameh± or two, so I will read Webster's definition^ if you will bear with me. 

"Accident: Literally a befalling; an event which takes place without 

one's foresight or expectation; an undesigned, sudden and unexpected 



event, hence, often an undesigned or unforeseen occurrence of an 



afflictive or unfortunate character; a mishap resulting in injury to a 



person or damage to a thing; a casualty, as to die by accident." 



I will now make the definition relevant by reminding you of a minor 






but nevertheless quite 



L 



important episode e# ' l tiw ««r of^the Pacific during World War II* aad I will 

^»uAcvi<«^. otAA. j?6UvfctaLj»<*tWvt. t*w 

iat^oduce the account of that episode b ^ fta yaag -^fr h a ifrft > jfar ing -tiar war— the- 

Woi&t. U)<^!IE accompanied hy a good many VIP's, 

President of the United States, fkmCTBi»^Ba?3tto-33fe±efe 




WaMrtitagi a g daBfi ^ritaMo^^ 



3BSaBSSBB 8 B B BSBaBB8BBBB ^ ^ 



journeyed several times half-way around the world to attend special 

mam^tagaacscmt conferences . They apparently could go with safety almost anywhere. 

-aMttapfa tdiaaroteqratMMKttgBaBtoamBBaBnBmyMSPBDHmsapaciO^^ They met 

_ » 

with no accidents. On the other hand, the Japanese Commander -in-Chief of the 
Combined Fleet, Admiral Isoroku Yamamoto went on an inspection trip in April 

19^3, the sequel to which may he summarized hy an official Japanese Navy 

/ 

communique reading in part as follows: 

*• 1 % • 

QumI* "The Commander -in-Chief of the Combined Fleet, Admiral Isoroku 
Yamamoto, died an heroic death in April of this year in air combat with 
the enemy while directing operations from a forward position." 

t 

' A&-4s -often . .the ease> the- communique did -not -tall jfche-^whala^rttth. 

Yamamoto didn't die in air combat with the enemy while directing operations — 



he met with an accident. I don't know who first used the following terse 

maybe . i t^was— Jiaay -Walker, /then-Mayor of New-York ■ City, 
s t atementf but it is decidedly applicable in this case: "Accidents don't happen, 

they are brought about" . ."-U«G ■ Navy r etjaua^ice^ions intelligence ■experts'^Kfere quite 

readi»g*qt«3£cbically all beeause its cryptosystems 

theJapanose Navy’s- Ma&rn*mmaaL messages /moAxiamw were not secure. 

— - - U, ^A*fccuj£. cLoujyxJ 

In the case of Yamamoto's inspection trip our Navy had his, schedule ^oma pnt, 

to the day, hour and very minute. 
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They also knew what his air escort would be* a»& 



. It was relatively easy to bring about the "accident” Yamamoto was to 



suffer * ruyi his death was no accident in the dictionary sense 

of that word — it was brought about, -at* -qPBafcyy 



nrBvirimnn »rte faCT ^rirnric^ ^i»i«ira^V< £Wg-xgi« «nt^^«Qn«<«BC^W acM2^^ 




/» 






because his communications were insecure. The Yamamoto incident 



later gave rise to a somewhat amusing exchange of TOP SECRET telegrams between 
Tokyo and Washington, and after the war was all over certain of them turned up 

5 

in the Forrestal Diaries , from which I will now read (Page 86): 

QmjO^SL "The formal surrender took place on the deck of the U.S.S. Missouri 
off Tokyo Bay on September 2nd. The mood of sudden relief from long and 
breaking tension is exemplified by an amusing exchange a few days later 
of urgent TOP SECRET telegrams which Forrestal put into his diary. In 
the enthusiasm of victory someone let out the story of how in 19^3 
Admiral Yamamoto, the Japanese Naval Commander-in-Chief and architect 
to the Pearl Harbor attack had been intercepted and shot down in flames 
as a result of the American ability to read the Japanese codes. It was 
the first public revelation of the work of the cryptanalytic division 
and it brought an anguished cable from the intelligence unit already 
engaged at Yokohama in the interrogation of Japanese Naval officers . tU\s CaWiu 
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(juxr '-• "Yamamoto story in this morning's paper has placed our activities in 

A 

very difficult position. Have meticulously concealed our special 

]pewcb FflrVuiA^fc^. /^vjGL>c|i<jQ»iLcC 

knowledge, we now become ridiculous . " A They were even then questioning 
the Japanese officer who had been responsible for these codes and he was 
hinting that in the face of this disclosure he would have to commit 
suicide. The cable continued: "This officer is giving us valuable 

information on Japanese cryptosystems and channels and we do not want him 
or any of our other promising prospects to commit suicide until after next 
week when we expect to have milked them dry. ..." 

Washington answered with an operational priority TOP SECRET dispatch. 
"Your lineal position on the list, of those who are embarrassed by the 

Yamamoto story is 5*692. All the people over whose dead bodies the story 

\ 

was going to be published have been buried. AL1 possible schemes to 
localize the damage have been considered but none appears workable. 

Suggest that only course for you is to deny knowledge of the story and 
say you do not understand how such a fantastic tale could have been 
invented. This might keep your friend happy until suicide time next week 



which is about all that can be expected." -V. ' 



Il~ A V 



\ - \ 



’ 3' 
i* 

4 



k But not many years passed before the'.’ Japanese began to realize j±h 
.-'ft- '■'■'<*1 w - - ■■ 

^ * _ . __1 - - _ ^ a 

•sMnM^S6*ii^te^p60E3 to^EEem-^dSfl *Q€ Pig ' r T 9S o ftfc , and recently published books *vvt, 
fcaflRj«Kifaxl«atoaa»xjate4dQaat»^ maBaaffte* ' <f 

b yafep anese 



'^hasaBon xactxMteittl 



- 4 -- 
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persistent bad weather and by lack of information concerning the doings 
of the enemy, they would have been truly dismayed had they known the 
actual enemy situation. Post-war American accounts make it clear that the 
United States Pacific Fleet knew of the Japanese plan to invade Midway 
even before our forces had started from home waters. As a result of some 
amazing achievements of American intelligence, the enemy had succeeded 
in breaking the principal code then in use by the Japanese Navy. In this 
way the enemy was able to learn of our intentions almost as quickly as we 
had determined them ourselves." 

v( - Hcre- aa -qk- a s Ade^ha t- W e ng er -told^gn -to dicbelief ■ In decrypts*} 
Jkd&z <jxzX (ktr***^ ~%o /w^Cttj , 

If It is hardly necessary to tell you that with the advances made in the 
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f%E3. 



't, anitat i 

M-i£T - 



Ul^uru^i 

invention and development of rdtanaBoatny x- wmayiim g amfc weapons of warfare, 

old 

in cluding communication systems, the/so-called "pencil -euad -paper ciphers", the 



and 



hand-operated small cipher devices, /the codes 



of former days became 



CUSu> /HZ&lsSL 

completely inadequate. Military, mynl , frh*x~ c 

A 

communications had to be speeded up; and obviously the along whicb-esiypto- 

j r agiawineM Bg MiyA ^exel npr o pat ,. ha d. J - .u-trave- l "w a s-t hat- ^teyby^-awadwatgaagnac ' 0 



pl e otro «« a e ehaB4.<M»y i a ppa r at u^/ ape e d in crypto-communications wculd at least begin 

S / 

to approach the ever-increasing speed of electrical communications .. SSawastachct® 




aaawtyaiwajwwBPiB^^ 



sacsMaxbaXJSW^^MxMBjKxM^ And let me remind you that 



B&ZB&XiSiSXSt 



the impetus for 

devising and developing better TOtef a.anbg» means for crypto-connpunication came 

• I 

not only from the need for speedier crypto-apparatus but also — and perhaps more 
importantly — from the need for much greater security in those communications. 



which were now largely by radio and were therefore susceptible 



of interception 



and study by the enemy. icti^3biMKkdaeAi^ Greater security was needed because 

£* 

ItainnMjMuriJiffl cryptanalysis had been made ir&tch more effective bjy advances in 

* - 

.that science, aided— by new cryptanalytic tools . 



A brief history of the invention and development of acypte 



dev-taea. 



crypto -apparatus will therefore be of sora4 interest. We 

t 

will proceed now with some slides. 
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Aside from the much earlier Scytale used hy the ancient Greeks, the earliest 
4ET cipher device known to history is the cipher disk, first described hy an Italian 
cryptographer named Alberti, who wrote a treatise on ciphers in Rome about 1470. 



The next slide shows a similar sort of wheel which appeared many years 

y 

later in a book lay another Italian cryptographer. Porta, who recommends the 

k jUvfe- 

r use of the cipher disk with keywords. I have the Porta ^ with me. 

The next slide pictures the U.S. Army Cipher Disk, which was used in the 
period 1914-1918, and which follows exactly the same principles that Alberti 

C 

recommended. It seems to have taken a long time for the Signal Corps to get 
caught up with Alberti! 



41 



48 



Mow I know it takes a long time to nurse a patent through the United States 

« A i . 

\ : 

Patent Office, but Alberti's device was finally patented in 1924. Here it is. 
Next is a picture of the Wheatstone Cryptograph, the first real improve- 

C. o 

meat on Alberti's device. I have the only in the United States, maybe in 



the world, and I've brought it with me. Sir Charles Wteaefeataaa- interested himself 

in cryptography and invented his device in the latter part of the decade 1870. 

It -i&~ »ot a - B i .-a.ple - e ipher disk* It consists of the ordinary alphabet on 

the outside and as/ alphabet on the inside; th e latt e r "b e ing ' a * M i x c d^ sequencc? 

A 

but there is one additional^ important feature — the alphabet on the outside contains 
27 places, the one on the inside, 26 . There is a differential gear in the device 



so that as you encipher a message and turn the big or "minute" hand to the letters 



the plain text, the small or "hour" hand advances one step for each complete 



^3‘60 



■-a 



K'" 



S&avQ jCi. QjJfJka/ts $ut^vvsr*^£feJCs 
revolution of the "minute" hand, just as in. a clock. h Arb-the~ei©e«'~©£' tuls- period 

(JLout-S^. aw> . 

thor.c of yrnvvhn would .1 1,kp- trf>-f*Hflm1 *T* I * > » so. 



ft 



Tn 1917, in casting about for a field cipher device for use on the 
Western front, our British allies resuscitated Wheatstone’s principle, embodied 

WT 

it in a little different mechanical form, and made thousands of them. Here is 



4^ one of them and here is an American copy of the British model. It has a 27 -unit 
alphabet on the outside and a 26-unit one on the inside; but there is now one 
additional and very important feature . You will notice that both alphabets can 
now be made variable mixed sequences, whereas before, in the original Wheatstone, 



VWt*r" 



ek'WTA.fcd-- 



only the inner alphabet could be varied. a good many were just about 

to be issued to field units, not only British but also French and American. All 

• for c es - wei ' tytu uae -Afr^ But even before they could be put into use it was sram 

£ &<?<u tejUArt . 

^that--tfee--eee w i ty -o fi - the de vi ce ^8 a- inadoq.iT»rtT and t hey w e r e 1 wn thdrawaK — 3~h a d- 

^ wa ^ t&$JL &X xtS r 

P MarnPjfch-Lnfr t.q flp With -dp^^ngt-r . at.lng .. ^ i H T-Br-Wrwi JT ^ * 

p&JC Aa c&&J$tU*gL,* '3&fc ylQo^, 3- 

^reached American GHQ in France about three months later I found I wasn’t a bit^V. t , 

/^r»A^4U#^L> rr? ui Vvjwdt&tiirvv^ 

- popula r w± th ’ ^ei , ^i'«^r-itieh-e"-Freaeh''aad--Aaerican ervntcd.oglBta-’c- ^Re lianc e J ~ 

jh? &L UA^dL^OMm-- ]/*>€>*■ £4^-y£ a-vAS J&-4A* • 

^continued to be placed in codes . 

'ScrvMi IL~JI W- 



4 9-4 



3fead^rcen»s«-^hg~q i-phe r ey Hada r . 0L French Army reserve officer. Commandant 

rs 

• a . 

• - .* ’* 

Bazeries, tried to interest the French Army in a device which he called the 

i . ' 

"Cryptographe Cylindrique", or cylindrical .cipher . His device consisted of 
a series of disks with a central hole so that they can be mounted upon the 
shaft; each disk bears an alphabet (of 25 letters in this case) in disarranged 

“ f 

r: •- " 1 ; b 
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sequence, and the mixed alphabets are all different, each bearing an identify- 
ing letter or number for assembling them upon the shaft in some key order, so 
.that the correspondents have the same sequence of disks on their cylinders. 

You ']^** your message i a »t»"Oipb er 20 letters at a time (because there are 20 
rings), by rotating the rings to align the letters of your plain text 
horizontally, whereupon for the cipher text you can choose any j MMH one of 
the other 24-rows of cipher text. (Bazeries used a 25-letter alphabet.) 

This principle seemed to be a very good one and messages in it appeared to 
be quite safe, but Bazeries never got anywhere in his attempts to get the Army 

to adopt any of his ciphers ^ vlwd2tx^Lui4 C 



i»BldiBlriMaiB8wcg3ilaB|HhwiaB^^ 






]Uo 



In 1915# an American Army officer. Captain Parker Hitt, 



whom I have 






fce ld - you , conceived the crypto -principle of the cipher cylinder independently. 



IbCM He knew nothing about Bazeries. His device, however, took the form of strips, 



you see. This was Hitt's 



very crude first shot at it, and, as a gift 



from him, it is amon^< 



the interesting items in 



collection. Here is a better model, -e aa e = 



made in 1915 > with the paper strip§ mounted on wood--wooden sliders. That 

*■ * US, AN' mMj 

5^ device was brought to the attention of the then^Signal Corps Major Matfborgne^ 

1 

in Washington, who thought he'd thought up something new when he made a 






cylindrical form of the thing, going backy' 1 unknowingly to Bazeries' model. 
Here is Mauborgne's model; it is made of brass and is very heavy. -And here's 



<50.3 -the final form of the device, as adopted in 1922 by the U.S. Army. It became 
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whafr w e ■ cal - l Cipher Device type M-94, used by the Army, the Navy, the Coast 

A 



Guard, and the Treasury. A couple of years after the M-9^ was put into service 

a friend showed me a write-up of something he'd come across more or less accidentally 

in the Library of Congress, among the papers of Thomas Jefferson. Jefferson was 

the first to invent the cipher cylinder principle, and he anticipated the Frenchman, 

50 Bazeries, by a century. Here is the first page of his description of his device, 

50.1 

which he called "The Wheel Cypher." Here is the second page. You see his calculation^ 
giving you at the bottom the number of permutations that his particular device 
affords — a whale of a large number because Jefferson proposed a set of 36 disks. 

In studying the degree of security provided by the M-9^ both Army and Navy 

cryptologists soon came to the conclusion that security' would be much increased 

(A. 

by the use of changeable instead of fixed alphabets. Among other versions, I had 

one made which used metal rings on which we could mount slips of paper and fasten 

them; thus we could change the alphabets as often as was felt necessary. Navy 

aaa<Ju 



tried other versions. 



--the various forms of strip 






cipher devices A used by the Armed Forces, and later by the State Department and 

Os S. 

50.11 the Treasury Department. Here is a picture of the final ^Army strip cipher device. 

The strip ciphers carried an enormous amount of traffic 

amviA. foo-c&SS&d- |yj votiv-C t/0&d“u>a 

5h - Neat- w/e^neme t e a machine , called the Kryha, invented by a German, in about 
FVus* 

I 

the year 1925 . According to its inventor the Kryha was the last word in the way of . 
mechanical cryptographs, and he tried to interest various governments in his 



machine. There isn't time to explain the machine, but 



-10- 






E? 0- ~ '*' *■ 

^ 3s=? ti l. 




sBiKnKdiScxttKxxi&araa&gbabe&xKKk&eBeuaDtx^ 



»3ididdMgp<fabecanBiaBAup d!eoegcx»K3rtjdx3bc^beycxBDac^a3faotefeafaafeoc^aBC8jbqbBiocx^D0PcaK 



;3sKbdbBaxxboabBcxKxrf!pbejwa9cxxKXXJ^^ 



5£T" here is a dissertation on the number of permutations and combinations the 

Kryha machine affords, written by a German mathematician. All I have to say 

about it is that in this case, as in many others, merely the number of 

* 

permutations and combinations which a given machine affords, like the birds 

nothing or 

that sing in the Spring, often have ^little to do with the case. Much depends 

upon just what kinds of alphabets are employed and exactly how they are 

employed. Large numbers of permutations and combinations don't frighten the 

cryptanalyst at all. For example, to give you a simple illustration, take a 

simple monoalphabet ic substitution cipher. The number of alphabets that can 

be produced is factorial 2 6 — that's a large, large number — 4-03 quadrillions, 

291,451 trillions, 126,605 billions, 635*584 millions and a few more^but you 

know as well as I that you don't solve tSte monoalphabetic substitution ciphers 

/) * 

by an exhaustion method. There Eire very much simpler ways of Aei Take 



machine., that.. provides hundreds of - millions' 
*sL3> 
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for use in encipherment, that is, the alphabets are 

/ \ ^ 

ively in a fixed sequence. ' Such a machine would give poor 

\s r r 

Ifeeavy traffic many mesglges -.would be enciphered by the 

\ X \ / 

alphabets) producing a condition which the cryptologist calls 

\ : . 




When this is the case he proceeds to solve the set of messages 

\ / \ X' \ 

vertically , c clump oy column, and when he's finished he can read the messages 

yX. X \ 

horizontally and eureka . 1 the businesses'" successfully terminated. When 

\ / \ \ 

kg^wn alphabets are\sed the trick can be done with just two messages 1 . 

^‘nv qma / VT&iAAnAAs ck*dierhs . 

rotuvn. nrnj +n ouc grnio»a. i^jHy i» y . < «y i >' crypto-machines^ it became clear 

that there was a pressing need in the military and naval services for two 



types of automatic machines, t hat -ta' , machine s whi ,chrWoaid ■■ get-put ■ of,the 

re c t la -«g «■ hand -operated-gadgets-. First, we needed a small machine for low 

A* 

echelon or field use and a Ailt- ma a iaaaical jt second, we needed a larger^ 

high-security, 

electrically-operated machine f nr ^ii— 1 1 iimlinn I aiij high-command use. Let us take 
up the first of these two types and see what happened. 

H&’ui.V 

I show y o u n ea t a d ev e lo p ment model-©# a machine constructed by the 

ouWwCt 1934 

Signal Corps Laboratories^ developed without guidance from Washington. The 

Director of the Laboratories at that time was a great believer in autonomy 

* 

and he wasn't going to have Washington tell him anything about how things were 

VA- 

to be done. When it came to developing a cipher machine, he decided that he 

A 

and his staff could produce a really good machine without the help of the 



cryptanalysts. So he proceeded on this basis to use up the tiny bit of money 

'HU-yw not permitted 

that was available— $2,000. We in Washington were WW» even to know what 

A 



vr*- !iua 






U4.1 



^S^p36Q 

11 

was "being "built until the gawd, model was completed and ready to be delivered 

to us. When we finally went to pick up the machine, I talked to Colonel So and 

So, who told me with some pride that his machine was all mechanical and that there 

was nothing in the way of an electrical machine or operation that you couldn't 

do mechanically. I asked: "Colonel, can you light a room mechanically?" To 

which he replied: "You've said enough — get out. There's the machine, take it 

The Colonel never was given the opportunity to improve his model. 









with you.” 



'AO ux ytksrCweJl'/fciMr 

because the crypto-ptrinciple was v q a;y faulty -Jfhe laboratories development 

»KSKS®C 




came to a sudden and ignominious end. Tfa e -t^yh e l e devgiop me gfc~~ r g n re seated a. loss 
—n . x> o * . . 



wasted what little money we had for such business/- - 

tpteagxjangniBataijfldBfaB^^ 





*sq3B»faWKiHixx»x±fc*aci^ 



Now we come to a development which is of considerable interest to us. 
Here's a picture of a gentleman named Baris C. W. Hagelin, a Swedish engineer, 
who was responsible for the invention and development of one of the machines 



that all the^ae rvio ea used in World War II in great quantities^, Ife^-Hagelin 

kf " ' " " ' 1 

ai$d--I < became -very -good frieflHs-afcfcer- the.. war . I was opposed to taking- 6a Hagelin 's 

, UjAl AUHft, 1 n.. %J n L . 

device lAAakfls WlI 4*>»- j t wasn . t a case 

-Ka f«t>V 

of NIH—^not invented here"^ bertjthe decision to^have-them used 



-12A- 



<t, -> j?b" \k itw. ■' 



MeUj "TAfllJUi C^/OV^T '9^9 ftfc" 

•by the. Waited -States Army^-was- - a - decin a level higher than my own, and 



xrim^^daoDBpitedcxiiiK it turned out. 



that my superiors were right, for 



our troops at least had something for low -echelon crypto-communications, whereas 



if I’d had my way they'd have had nothing but pencil -and -paper ciphers, or the 

U&JU&. urtsxa. fuJs&uJL 

M-9^ device, or the strip cipher device — all # too slow. 



<4> 



Now 



just a bit about Mr. Hagelin. He" did what best describe^ as a 



hysteron-proteron. That's a four -bit -word from the Greek meaning to do a thing 



"ass -backwards". I mean that usually you go into cryptographic work and then 

you have a nervous breakdown. He did it the other vay^ He had a nervous 

i X ' uoav A 

1 . w i n 1 . l a- h e- " wQfiku rec over lag he inver 



breakdown and , 



. 1 ,.^».^v,^>ve»iag he invented this machine «-a«d He made 

awoyp million U.S. dollars from his invention. That's not at all a poor sort 



of hysteron-proteron if you're going to do one. 






0 0 Here's a picture of Hagelin 's very first machine,. I've brought one a f .- b is 

JSr , . — - — ■“ 

L>% vary winkle, in fact, number one, .fer . ryo»r--^bttspect±onr --It-was a present 



from Mr. Hagelin, for my museum. jtejbescMaHc^kixlagasKi^ From that 

prototype he built better models and interested the Signal Corps in them. As 



a consequence we built in America, for World War II, this six-wheel Hagelin 
machine, which many of you no doubt know as Converter M-209. 




xm 3flddacj^feAbgxqbgadcgHarbcM«»d^gg«xa«c tiw^ 

j2axjpBaamd^ciRx1x^x^jmfc«2!k 3gfrHrincft3*k«Tghrimiiimmn«VT{XtxKKl^ 



/ 



^febflriaad flrx(»MaaAxbhQflate«3daaBBBaa^ « 8yp fadapgjpE agcor^ingj-^. 



^a aerican inch ^moasugoafenta^artd- specif icaWOns , Am erican- 4o01s > 



Lae 
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jF*? 6 es*» 



thrift JjUuaapaaaH«ejbr&c aeasur@jae 4 ts. 4 ad- toole, -enact we -built -aa astonishing- number 
of them — over one hundred and ten thousand > w-' ue<yui j+jmdL 

Ma« 2 r’«f -you -may know that t h&.lA~£09 had a' serious j-a-very serious security 

wenk n oc b ssy^TTetr^rords' later- This is a picture of one 

OWi# M-*0? c\, trv-Wlft. 

of j ^fae Ila gefttn machines as modified hy s ^pt e or our" GI’s in Italy. The M-209 

^0.3 has no printing mechanism and you know how resourceful GI’s can be. c o u p le y <) 

’ “ - ^ 

o£ -them aeretmged parts here and there a^d improved their machine to make it 
a printing model. See, here’s the keyboard, and here’s the printing mechanism. 
Inside the cover cartoon of a couple of GI’s getting ready to test a 

home-made still for the production of you-know-what. The caption at the bottom 



fr-ei-de-view 



of the cartoon says: "Yes, but will the damned thing work?" 

JteaO Mr. Hagelin y ye e te d to improve his machine and^t 

•m 

'Qjv&A: erf— e n a-o£. 4 ai& . l at-eat modele — the OX- fifl 1 P r inty not only the plain text but 

AowjC. si^i^jiico^S^r 

also the cipher text, prr 1 ^irtHnrnrirrrnTt'f^ n mnrh imprrrurrd riph^rfnc -rr-^bnn'f rm, 

4^(fcA-6&jL' ^/u*AA\aL (f^jfceAz, ,* 

b ecause . the_ jwbeelsv -ij!tst€SSH)f being permanently fixed upon -the shaYt'/'-ecre J 



f , 

demountable -easi^eair 4ser rearranged in 720 different .ways . The stepping mottpr 

/ 

fem-iheae-aH seele-^' complicated. --We’ve, studied this impr oyed-niSSel for some 

t 

_*» «f r i^is moment . we_^d e— eot- k now- faow^-t 




-ve c ipher s 'produced” by 



v* wmam un/uiwMw . «.v v — uyv m*yyw- **vn «-■% 

1 t£_ r_L_o_ L 

+ JtLifi T" aj?v > -t r° But ' Bbid. l^iya»-t3ae^vepy serious weakness. that when two messages 



are in depth, that is. 



earlier* when they are enciphered by 



the same keying sequence, they are solvable. -S g -tiao permitted i 



eo uld . sb o w^yoM^ -hP^ ^a ' S ' I -ly "fETs- -is "donay-but you’ll, just have to.tahe Mf word 

-14- 
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fokit. When there are. several messages in depth the solution becomes even 



Dad p 



e rata. 
,’connei 



enciphered "by the s ajrar^ar rangement of keying’ elements is an easy matter. 



That is the fatal weakness\>f machines js£ the type 



*oblem ^’connection with the N$s^/6f what we call key-genea^tor 



ion f>e 

' rt /m frt t: 



easier \And the. had part about this from the standpoint o£- COMSEC is that with 



a solution bK depth the recovery d £ \ he key— the whole setting of the machine— 

\ / \ / 

is^/aot at all difficult. Then, of course,', the solution of all other messages 



ype''af .. the M- 



■209 and is the big 



types of device 



fpr use b^ the Marine / j&Q. s 

Corps is a double M-209 machine and A i' 

/ 



cipher machine which has beep built and proposed 

MEigjbMKX H a BftBta i m nMoa^^ 



jJZQ O. * 1 *£■ Qah-aJ'. 

and, it is an improvement security-wise over 



the single M-209 > butyl ’m sorry to say that It too has the name weakness of an 



easy solution when'two or more messages are in de 



iiwo or m 
:ry boon. 



tfT Mikbx 



'l think we will have 

liijghxlaraamscBkplutlnEfeBx 



"something better very bqon, and I've brought^a modelvfco show you. It doesn't have 

the weakness of the M-209, And hasjt^uch higher degree of security. Moreover, 
j&soqgKahxsaxxBaaMMarifflksKatelyxnbpg^^ XBBQqmapoc 



illNpnd il 



It requires no source ofyaiectrical power — not even a dry cell-^and it produces 

aiMfrfexjM>T*ufca ^ 

^/printed record. ^ 

Now for a quick review of the development of what we call electrical- 
rotor machines. The first one I show — also a product of the Hagelin Company 
in Stockholm- -was not a real rotor device of the type we use today but I 
don't want to go into details. I merely want to show the device, which is 



connected to a Remington electric typewriter, so that instead of writing 



down letters one by one you can make much more speed by having a printed record. 



Up to that time devices of this sort were only of the lamp -indicator -type of 

You ’ d aiAetSu >uw»&L*»voi>C teJTyou • d 

machine, press a key^and a light would light j ^mvmpsm have to write down 

the letter flashed on the light bank. and then A the- - oAgher wheeJ s -yrmld-natep. 



/t-. t £»*»• »»f v 1 # *“ 
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The next forward step was taken when Hagelin made the printing mechanism 



^ vp an integral part of the machine itself. Here is the keyboard, the printing 

mechanism is in here, and now the whole assembly is very much smaller and more 



compact . 






Cn Now I show a German machine known as the Enigma , ^ commercial model, 

IVt&A' Cf^'JS’janANA.. 

•j nvantisd aad -put - o» * tfae -aarkaJt -4 about-- A9 B 3“ 'fi4- - It comprised a keyboard, a 



light bank, a set of floaty ie w he e ls called rotors, and a 



dry cell for 



power. In this case the enciphering -deciphering circuitry is more complicated# 
3 &jjl *tcT 

3^ goes from a key of the keyboard, tobMk4&z>Qugj^ a contact on a fixed entry 
OuuUi. 

plate or stator A iw* c these stepping rotors,, twMV 






a reflector or 



plate W&U&. tnsWA. 

reversing back through the cipher rotors (to one of a bank of lights » «e«4hat 

"^he current goes through the rotors twice, which complicates things a good deal. 
•£tafeaQmn&fr3catx»K»aaaauex}SdB«pro(t3oon«^^ 

Each time a key is depressed at least one rotor steps forward and cSWm|W'^i> 
/-h»>«w-g -hipping, rve^ivm '>■» <!-<»■» 1 a auSlT that ' the machine- -has - a~rather -short -^ycla.^.s 

.c.nr->i t.K-Liftgp -go,>™4ee* -thatt 26 ^ .iterate ec 'littreT.es s than 23 ^ because 'Of-certaln 

f^atoEe^ntff-TrtTteh -it isn ’t -necessary to go. 

% rotor- machines 

-LU'-take- TTiST’jIrTDaS' •developments of iliairi ■ ir Jf T f rrrTfl 



War 1 If; — At- the -moment, and In .of -time- to anticipate - Gerinaxrtid^'elOpffiffErts' 

Hflovr' 

ih t bia ■ £ i e ld ^ I want to go directly to the American developments in rotor 
nt machines. First, I show a picture of the late Mr. Edward H. Hebern, a 



Californian, who seems independently to have thought of rotor machines. I 
asked Mr. Hebern one day how he happened to get started on such things and he 
said, "Well, you see I was in jail". I said: 




"In jail, what for?" He said: 




"Horse thievery." I asked him: "Were you guilty?", whereupon he said: "The 
jury thought so". It was while he was in jail, then, that Mr. Hebern conceived 
the idea of a cipher machine. Here is his very first model. It is possible 
that he built it as an item of occupational therapy while in jail. bat^--thi«k-’ 

he got ■o u trttf- jail* It has a keyboard, 
a left-hand stator, that is, a ring of 2 6 stationery contacts arranged in a 

Y 

circular fashion to one of which the current goes when a keyboard key is 

depressed; a rotor of 26-points, and an exit stator of 26 contacts on this 

\ 

side. It is important to note that there was no reflector rotor; the type here 

tt T k . * 

is what we call a "straight through" rotor machine. You press a key and a 

-- * «. i 

lamp lights. There was just one rotor in his first model, which he built in 



1922 for the Kj^u. Klux Klan. Here is the first printing model made by 

r |\,\ Mr. Hebern — still a one-rotor machine — with a keyboard and, now, an electric 






Now we have three rotors in cascade. This, too, was a very important step — 
the cascading effect was a great advance in connection with rotors . Here I 
r \ r 4 > show his next development — a 5 -rotor machine. H ere 'a re- the rotors removed, 
.frran the maohine-to-show you what they look -like. -They vera-js.till -variable 



typewriter connected thereto. 



-j-* 3 w OT-th .didn't have" 



She -eeacaiMegUtfre. idea -of cc 

in-' any 'kiriBT ofaThigh-e 




aTaout Hr .' Hebem ' a- rotors 



fixed wiring, as in the- German 



-for these are detachable wires, showing that at an early date 



-in rotors . “ This is an extremely 






u tuf mggH ine~. 



This shows his next ste p . * 

A 
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coo»®e%±Qa:^haag^ra-*yGU-could .-tak€^wi»as.jaad rearrange ..them -as and jwhen you 
g - fcenacd . There is an interesting story connected with that model. .T fac» , Sa vy 

De partment ., wao ve ry much interested in,-cipher . machines^ Bw e hjnfore— s o than 

** - ' ' 

•Hrr— ftrmy in ithonn dayitj TlirAaiiifir : ~tHrfy ahnnlnt.rly Tinri tn Timrtn nrrnrr _means~£or 

* ^ 

r 

tr 

*** 

^p p e cdtci * - ■ eo aBUBicaticpns'~fronr Washington. to-the Fleet Commanders and , of course, 
for iabra-flui’t c ummunieat i one. . The Navy thought this Hebern model a suitable 



machine and they ^ o t ..«na 



iati'nn.. fW th«» pnrpnao J 



a large sum of money 



for those days, $75,000. They proceeded then to negotiate with Mr. Hebern. 

X was asked by the President of the Naval. Board that had been appointed to study 
the Hebern machine to give him my personal opinion of its security. ■ i-ted-no 



Navy -had only t w^-JbQtb .undergoing: service "teste .- ""--But I 

Cr* ta- 



per suaded the War Department to purchase ^ machine from Mr. Hebern. y - I-aat 
and"“studried" iff er J some Treeks-^-three or four week*-. XThe whole of my outfit 
consisted of myself and a World War I veteran, an ex -prize fighter, with 
crossed -eyes, pug-nose and cauliflower ears; the only thing he could do was 



I -may -say. that he^could^copy- from draft letters ca? -eipher- text with 

* -» - — - - lx j. - — . i .1 n _ ms a . _ 



sbeolute acjun^oy^-.but- t hai r^ 3 ~ all -he -eenl-d-do. 



was up to me. 



l-ut ) erf ^tyu>L A. frP 

< A e ■ !» a ayfr I studied the Hebern machine^u ntil an idea for a solution. <?*■»; to ^ 

tnfiJC « MrtJt Jo v*^,S- t5v Jtr erwt - n-vvA.“^tru.v*A "dir 

ma^ whereupon I went over to the Navy Section, which was then in charge of a 

Lt. Struble, wgfce now iflt Vice Admiral Struble, Retired, with an enviable service 

_i . _r - - ■ 

record. I said to Struble, "Lieutenant, I don't think that machine is quite 

« i * _ 

* " * ' 

as safe as you think it is." He said:- "Oh, you're crazy I" 



I said : "Does 
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T- 



BSSJtSS 



J N- 



this mean that you challenge me?" whereupon he said, "Yes". So I said: 

"I accept." He asked: "Well, what do you want in the way of messages?" 

Cr '* r ** ubrVtA 4 *^ 

I said: "How about ten messages put up on your machine?" He gave me the ten 

A 

messages and wHUfr n a me , typing help f r om that"ex-*jjB. , i ' ze fightgj* I worked on them 



until I got to a place one day, at the close of business, when I had reduced 

lO^ueJtw 
■■■■ in tho - f Irtr t 



a a y 



the te&t of. one of the messages to simplest terms: I knew , 

A * 









J.hQ taut >o£ d&at. 



letters which were the same, but I didn't 



know what the letters actually were. Let us say, for 



-£P. 
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instance, that the first, the seventh, the ninth letters were the same, what- 

14 *^ 

ever they were; the second, the seventeenth and the twenty- third were the same, 

) (q *d" and so on. That's all I had when I left for home that evening. We were going 

jkvJC cU^c^jt^dL AojejsJ^ i ! v 

to some sort of a party, j^ad - I l » ad -theae -lgttegB— in my -mind, -at -Kast^the-ones 

^mt-Jwwpe^dentioai-and-theijr positions. As I was tiding a black tie, it 

suddenly came to me, and I can't tell you to this day just how or from where, 

but the whole line of text fell into place with all the repetitions in the proper 

place: "President of the United States." I could hardly wait to get to the 

nryJt^Z UJ&fivc., 

office it^bhe morning, a^A. to my intense gratification^ found that my sub- 
conscious guess was correct. I reconstructed the ten messages, turned them 
over to Lt. Struble, and there was a considerable amount of excitement after I 
showed him how I'd reasoned out a solution. The Navy Department cancelled the 



order that they had placed; the Hebern Company, which had been selling stock 

+V*/"» tin n 4 PI MPvmn 4 - M-M n PI 4 . ^ . . j U TN V L 1 ”1 



on the basis of great prospects, went to pieces. 

‘A 



. Mr. 



Hebern, trying to recusitate what he could from his unfort unat e encounter with 
an unknown cryptanalyst, bought^stock in the Southern part of California at 
40$£ and sold it in the northern part of the state at about $2.00. The 



California Blue Sky Laws didn't like that sor.t of conduct and Mr. Hebern spent 



* 

•^r year in prison,/ 



rnents on his machine. 



giving him lots of time and opportunity to think up improve- 
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Despite my solution we thought that the Hehern principle was still a 
i&a, rw^AJt^ A»tx4 

good one^ and^Navy went ahead with Mr. Hehern after he got out of prison. 

A-vureU^ CWA^L ^rtnv ^ c\a&j*<Svg- )w> . 

i 172.10 -a -picfrure -pf _.fiT)? la 1 -*' -metehine-he , h»-5i+- fog, the. Navy. ^Hehern, wanted 



to get paid for hut there was just one hitch— the machine 

wouldn’t work*4$£l when this was pointed out to him he said: "Show me where 

iea 

it says in the contract it has to work", and when they couldn't, he was 

K 

paid off. The Navy then decided that they had had enough of Hehern and 

went into research and development themselves, a laboratory b e i n g -esta blished 1 „ 

A 

tv* lO&fcV WN*4 Ji&jlv. 

J*. the Navy Yard. Years later the Hehern heirs brought suit in the United 
* * , ,, « » * 

States Court of Claims against the United States for $50,000,000, which was 

settled / ^aat*^^ n ^ r at eT^ons iderahle discount, $30,000^**-*^^-* ^ t&^'VvAeiU; 

<7W\o- &cn. ol. oJytruX. 

< i J m-'g©ijag^ 3 .^h^ - now a few- slides ^fefae Army developments in rotor - 

type crypto-machines. After the debacle I’ve told you about, wets-the first 

stoat ..that we in the Signal Intelligence Service in the Office of the Chief 

L S H^oQ, C **** 

Signal Officer, in Washington^ h sw ^ at developing a machine for the Army. HXAstA CL 
170 ?~l '5 -rotors r and now ._an .interesting feature --an 



external keyin g. mechanism^J[^hag. come to the c^clus^on that internal control 
mechanis ms for step ^ ngrotors had a fmjdament&X .weakness j that is, J^felt 




./■ S' 

that~~yo u mua x not make the rotors dep end upon themselves for the stepping, and 



S 



I conceived the idea of having an external key, for example, a teletype tape. 




‘“Which would steVplong and control the stepping of the rotors in random 




composed of a “sequence" of "random characters so £Eat 



r 



the rotor st 



was quite erfati-»y-and -tha^^ wa . s 'TJ U T- f irst -shot 
fe; I 1 —: , K— am ft . — 

S *'5St ' •* L.. w 



at- i±«» 



^ -XD-r 



STitiyi^Si ■ 

I-think the principle Is still quite .safe, especially if the tapes aren't ; 

f v 

ov er bur de ned-'ln usage « j^Ehisi is-..nnafchPT- -view n£_ the same inching- -here i ft -the 

• V- 

tapo-iyangri.i r -fche rntnr-j!, the keyboard, an electromatie typewriter, -etc, 

-I-think th is- was one-iof. the very " early models We had.^pxgjg. -iiey 

trfjw^-gc Qwi which you co »id tha-ae^) act ion" for' the day" add Oi'dlri^tcr t he 

keying d oci«nf»nt T f serious practical weakness, of course, was the necessity 

fin i»i»1iu I l.Mti wittT distribution mf^tapee ‘S^e- machines functioned ell right 

but before even ten of them had been produced we had hit upon a new principle 

j tUrUU^TK 

for the control of the rotor stepping. I tried my very best to get ^he-C i gnal 

tSuifcL-' 

go rps to change the development right there and then, and shift to the new type 
of control. I was practically thrown out of gae 



o&jjuy*-. vv 23 

»■ oi g&cc - of-thc 'chief- of the 



dwisi en with the remark, "Go back to your den — you inventors are all alike. A 

new and better idea every day. If we listened to you inventors we'd never 

get anything out." So we had to put the idea on ice, that is, in secrecy a- ur%*$a* , 

AStrufc ‘fcvnv** 1^1 < Wi^ “^acL 1 JtS T* E^CP'lj «VvtaT 

172.4 I wl . lluBwifeeh . sl L wrtQ t .to > M a vy -MARK I - BC K» th e electric cipher machine, Aeaigned^. 
developed and built .h y^ d ac -ffav y without any help from Mr. Hebern. -St-had a- 

fl£ gj-^.ppi» Sj -Vinaoa -ttprin tK& US'e“Of Bowden 

w ir es -o ] ? -fl ejfeibljs--»ables-^-- f-Tfaey Werer tricky- and gave.xiaa .to -a lot of -difficulty 
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-produced-** 

but-over''and“-teey©Qd -that the-machine bad., a fatal security weakness . f - J L t 

ac^/TBMB»r=ef i^rertmidxj^ , ~W£rgtli' but-wlttr only 15 differeSt” starting points. 

l^wr^ir - I said about such 'a s ituationja lor m±mrttts *gO . 

/ fei rtMS - ■qMBaZEo- be- the- case-^I -do not know^£oe’ T ^here wasn't any eeoi»iiua4rttwi 

■^fcwea.M^ 

w collaboration in those days n ^th Army cryptologists — we didn’t even know that 



such a machine had been 



built by Navy. Each service went its own way. When 



there came a change in command in the Navy code and signal section. the new head 

j f Si/ 

^ MoaX J. ECM 

decided that that development had gone far enough and he wanted some help from 
the Army^ if he could get it . He came to see me one day and told me that they 

3>J|, Wt k.«u>£ * 

were in difficulty and needed new ideas, i < wc -ha d - e my . I said: "Well, we 

or I 

have a good idea but it's secret." He asked: "Well, what do yot/have to do to get 

it released so that you can 

/tell me?" I told him: "I'll have to get permission from the Chief Signal 



Officer", which I proceeded to do. I mention this specifically and ask that 
you believe that this was the situation in those days — there were Army secrets 

ft 



and Navy 



C>v^p&£ o*u«* 
favy secrets. 



and never the twain did meet. When I told the Chief Signal 



Officer what Navy wanted, he promptly said: "Of course, let them have it". 

UK. ’-Ke^jvr-" 

So ^ told the Navy about tix^ - A g my idea for rotor control;Uri£ shoved them the 

yv*vfc O&ur H. <td vumJ^ct Crf* iKawT' 

c ircuitry aed- af t en -some dHay the t.Trfng; was -adopted - ■ «~«gfae .delay i 

* A 

Nov y doubts LLa t * cuff lcrXent-rxur vest 

ba.^hfcaiaed sets^of 10 jje^iSbre- rjstfw&p- 

ete&^ipal^drk -had -to~ba^done-< 

teg'Tr ot rta^’^oubles-.wi. th .A he.ir. rjitoy gV B u d rtoe ^achines^were-built 

VwwS«ixv -friz* b~^ Sr _uMiL ksJk- " -ft*. 

/by the Teletype Corporation, a very competent organization. . a n d were -highly, 

| 3 ^successful. Here is a picture of the MARK II ECM, Navy terminology, or the 





SIGABA, Army terminology. If it hadn't been for the fact that we got together 

K fStChA^C lAAfe\AO 

before ve became belligerents in World War II, ^ would have been extremely 



fc" “j L3«= 
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difficult 




■ A r a y aaatitbg^Savy to have had any inter -communication at all 



b«^.:x^3<1950cxxxMHpq&iat 3e & qg*>ga ^ agx*^3^^ 

The ECM-SIGABA came into use just in good time, and it was used 

tgWKTOKWpnoBQSjBOMeaaatiBAKiiaMxii^^ 

■ J Wm- X. 

with great satisfaction on "both sides. I might add, in closing that incident, 

A 

that, to the "best of my knowledge, this is the only gadget that was withheld 



^Orr^t UJat IT. 



from our British Allies, 




They knew that we had a machine of this 



character and although we knew all about their type of machine, in fact, the 
Navy was using it for communication with the British, 

it was U.S. policy on the highest level in both the Army and the Navy to 



withhold our machine from ffin— British 





struggle -for - several. 



on this point until the recalcitrant people high up in both 





began to 



see the ^ight. The trouble was that when the technicians .atssured them that messages 
iut up bytMs machine-^ wouldn't be read without having* the current key list — 




V 



that we ours 



\ 

iara 



Army as well as Navy,, had tried very hard, to do so and 

7 V\ 

, \ / / \ 

failed — they just wouldn't believe it. One reason for this adamant policy was 

s yc /' 

they were daily getting the decrypts that were being produced from G^ifian^ 

:hahce . 




ssages and they just didn't feel like taking any c; 




\ 



sure as they say they are*" they asked over and 

/ 

/ perhaps. entirely needlessly, 
many millions of dollars were spent 

y _ 

iq. Establishing means for inter-commcuxteation with the British^ By this- 1 mpgn 



'' — — — «24- 



ri ft 1 ' tim 



T- 



^ y Ij\L u; 



a*aa 1 «=S 5 ' E 



that we had to^develop, prodya€7 and use an adaptor for our machine ao tha t-* it 



could^nnter - c 



o^o 



ate with the British TYPEX, and the British had to\io the 



same^^^their machine to inter^h^mn^^fcewith the ECM - S IGaB^^But by the 

end of 1953 we were able ±0 convince the authorities that it would-be all right 

\ \ 



e^^itj^i 



and finall.y__.the hr it l ah were allowed to have -our .machines tuo^il-th^- 



could ” 



cd ^flpLet e the ir developments and be on their own? I think it would be nice if 

there were time to explain the crypto-principles of the ECM-SIGABA but suffice 

it to say that we know of no case of solution of^tfeie~«a«hi«e.-*nd system 

thToiighniA .bhe—war } and it is still in service as a high-grade off-line machine. 

During its use in World War II there was one possible compromise which raised 

i' 

quite a storm when it was discovered that some Frenchman had liberated a U.S. 

Army truck and trailer — the latter carrying all the 28th Division's HQ cipher 
machines and materiel. But the stuff was soon found where it had been dumped 

Uvv A. hcAMSt" \dtuAft A 0-"^ V H>C CirtvtLwJU < 

by the a noojvhy ^ 7 T, ~ o r. The episode was one which caused the 



Signal Officer and other officers to be tried by court martial. We had and 
still have very strict rules indeed about safeguarding this gadget, and in 

i 

mentioning this point I should say that we weren’t worried by the thought that 

our messages could be read if the Germans would capture one. We were worried 

by the thought that they would learn how good it was and would copy it — thus 

cutting off our COMIHT. I can hardly refrain from telling you one of the funny 

things about our not giving the machine to the British when they needed it so 

h 



desperately. I mentioned the strict rules about safeguarding it — who could see 
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the thing, who could service it, and so on, and we saw to it that these rules 
were strictly enforced. But there came a time in North Africa when all our 
maintenance men were knocked off and there was nobody to service the machines. 
However, a very sk illf ul British RAF Officer, an electrical engineer^ was pressed 
into service and he maintained our SIGABAs there for a while. I'm stare you 
won't he astonished to learn that when he got hack to London he huilt for the 
RAF a machine based upon the ECM-SIGABA principle! 

I Wqnt to shojf.-y'&u next the cipher machine which was used very extensively 
7^.1 "by all the German Armed-Forces in World War'll. This was a 



?ir commerpial Enigma manhineTbut an important 
wher^-^itlar^ca^^ito power, at whih 
from the market. .JftTtRA’ 




Nation of 



introducf 



model was withdrawn 






jfafebcim fcc 



ymi rnn ~rr - 



on 'the'jwjctr slid 
./ \ 



slide , Here are the rotors — they are exactly 



the same physically as -they ware on the vcommercial model, hut with different 

\ ; \ s' \ 

wirings of course . Now let's see what the. ^edification was — the -.addition of 

X ■ ■ X \ ’’ \ . 

a plug hoard by means of which one ^ could change the connections between the 
^Tsjeya^f the keyboard and the 'lamps on the lightbank. There^.x^re^]^ plugs and 

V • . 

jacks and this number wa,s not chosen by accidentj they apparently had mathematicians 

\ S' \ 

figure out absolutely the best number of pluming arrangements for this particular 

\ \ \ 

md^hjne. There were certain weaknesses in the German Military Enigma but the 

' \ \ 

^ S A \ f** 

absolutely fatal weakness was/that they couldn't, or at least they tiidn't, change 

\ / \ X \ 

their rotor wirings at/^u.1 throughout the war. Without the rotor wirings we 



couldn't have dprfe anything with their traffic; but with them we were, -able to 



read practically all of it. 



e were,- 




The Naval Epigma was much like the 



val^Ejp 



Army and Air Force machine ejsdept / i^had one mpfe wheel and the rotor wirings 



XL- 



different. -the peri od.. 

Now we come to the development of cipher machines for ^teleprinter communi- 



cations 






ssi-ng speed -'t5f •eomraunications, -it was necessuary--t-o 



1iiin-iinno.f>f . yre.aJ ^ 'trt-n ry ' qf fry Radiography, 

-JLjxd L -()€£**_ AtOiA**4 U)e-<QV, X , 

■ w a s ■g ea o g aiz A d- a^- lon g . »tl me -ngo . ^In 1919, for example, the A.T. & T. Company 

engineers, in collaboration witn tne Signal Corps, devised this modification of 



the then standard printing-telegraph machine to make it a printing-telegraph 
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j ••ta.Lsaea 



cipher machine, using circular key tapes of random characters. Great faith 

* ' 

was placed in this ‘machine hut it was not put into use until the war was over. 

* ' f 

: 4 r ^ 

I . 

By that time I had come hack from France, rejoined the River hank Laboratories 
and accepted a challenge to solve this kind of cipher system. It‘s too long 
a story to go into right now hut as a result of the solution the Army dropped the 
project. I think it was^in a waj^too had, because when we had a ^need for 
teleprinter ciphering in the early days of 1942 we actually had nothing except 
this thing. The big trouble^ of course, was the production and distribution of 
>858 these key tapes, and it is a problem which is still with us. Here's an early 

model of a machine for making key tapes. We improved such machines very greatly 

in the next year or two, so that we could produce hundreds of thousands of good 

a * » yy- — 
* ' ** M, W 1 ' - 1 ■ || — 

tapes in a hurry. Ou r , mn d er-a- k e y^tape manufacturing apparatus-uses' ^ May' g en erate 
■pmn jareduaing pi rr rtroai ga ily tfri — TTmdnm ”i TiijnTlrrTr~fftr^irri*tl1nc ~thr tapes.' 



This is a rotor machine, the SIGCUM, which the Army developed in 1942-43 



W&tfcVv tV{V£ 



and used very successfully. to encipher teletype communications. It uses not 
^ _ 



perforated tapes hut rotors which step in an erratic fashion *>ot- ’'not ,i -'aS l, ‘^!P!l?a"C lc 






° i° In Bm# T »T — r-while -in ir~nrt , ;aj ft ha** "^aknpfiBifnaj livery once 



in a while, when we discovered new cryptanalytlc techniques, we found that SIGCUM 
had weaknesses which could he exploited; whereupon we would proceed to tighten up 
things by cha n ges In the method of usage or the method of stepping the rotors, 
and so on. The machines are still in use, doing valiant service because we were 
able to incorporate more and more improved features in it. j&UL_oaw , . .designation 



Hew we have to say a few words about certain other types of ciphering 
apparatus. For example, it is necessary to send, with security, weather and 
situation maps a ad-a o -it~wa a ■ de s ira bla.. to have-a machine which- ean^enrtpher -and 
detfliphi-7* JWMml le . The generic name we gave to machines for ciphering facsimile 



was cifax . jg nns such machine, that, was developed by Army for., .the purpose, 

telephone 

pgiirni . ^IGMEW, We also had need for machines for encipher ing/conver sat ions. 



"Vo MX. ftiuK 1 

ma chines witk the generic name ciphony equipments# here’s-' the first ehot -at-it. — 



a development by. the -Bell Telephone - 



H Les r called SIGJIPe- It was& gyp 



la, a way— It. gave yon much mor^'f eeling of" security than was warranted by the 



e grr-' Conv e r sat i ons en cipher e d by means ,_ q£- that^-thing.cpnid be read. 
ceadJUy, flad-gg fl 11 fawt. this but it was, .only • 

PA 




iThe Telephone Company vi 

A + 



i ita- warh^, in collaboration with engineers 
4 



from the Signal Intelligence Service’ and the Signal Corps, r* a very high-grade 
ciphony system which became known as SlGSALY wa s -finally developed and was 

r* 

fyjt u/eAa. 

extremely successful, . ,®ach terminal, .cost over a million dollars, a ad. . th e ro ■ were 

■4 K. 'A 



s e v e n ., cfr. t hem . 



The professional cryptologist is always amused by the almost invariable 
reference by the layman to "the German code", " the Japanese code", " the U.S. Navy 
code", etc. To give an idea as to how fallacious such a notion is, I will say 
that there are hundreds of systems in simultaneous use in the communication services « 



rff nl 1 ri 1 T*F * , ‘ g o ror naentfa You not only have to have different kinds. to meet specific 

A 



types of communications but you have to divide up the traffic for two reasonsj 
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first, so as not to overload one system beyond the safety limit, and second, so 

that not everybody can read everybody else’s messages avea-iir-the’ -same^^aiHily . 0 

^fsjZJUZ- J&eJb A- j2ao4^ Uii, C^vWvJ*-«&*-v * i^>4 /&V><CM* /**• V'A 

J ton i MlAwaj ~3L a a.l t happened primarily because this last principle wasn*t in effect ® 



at that time in U.S. Naval communications. 



4 
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%SfT- 

JEh-is -slide shows ^he number of ^cryptographic systems in effect on - ? - D ecember 



Ul 



5L"?>C? jlgga aaa&&^ October 19*4-5 in- the U.S. Army alone^ 



Wflu& 0ve*r Ifr-oJ ,•> . ‘ 
2* . Sfe*?«-<w«re--Aiter(sQ.ly hu 



ly hundreds 






6f-t faea » »« . T fa o next- slid*, shows the number of holders of cryptographic materials l vJ 

h x vsnA/ aSU^-yV 6>,oo-c> j a , — 

wtu4 fr’vJwv w^nu* 

during the same- period, -December -l^l^Oetubei' *494$^ and, mind you, this ^s -UtB .O 

O^.Army and^U.S. Army Air Corps alone. It does not consider U.S. Navy, wh*bc k h a d - 

nor 

a s -gr eat or--perfcaps^giaeaternil«tr±bUtl^;/the State Department, the Treasury, 

D>Si 

and the many other agencies that use cryptography. 

A . t 



Keeping track of crypto-material and accounting for' it is a big headache. 



There is no way of getting around this that I know of and it is important that 



the rules for the protection of the material be followed absolutely to the 

also 

letter. aAiMpafa iw YirViiAgm The Japanese/had very 

definite and detailed rules for accounting for crypto-material. They were 



1 2^(>Vrt£«L' 

sui^oeed to burn the codebooks, the cipher keys, the cipher tables, and so on. 



They were enjoined to scatter the ashes and then make a certificate, witnessed 



c ’ 



by a fellow officer^ as to the complete destruction of the material. ■ ■Occasl-eBetliy 
these-^rtiflbat eo -wer e-^sjent-by -radio and ,, than ,,.wa-would find a -ease like thi*. 



- certified --thg-destruc tiaQ ^y. b urn in g and,the ^scat tering of 
one chap owft. 

But -gd was observed by binoculars when he took a spade and dug a 

in 

hole, dumped the codebooks and the tables in that hole, and poured/ some water . 

into the 

in due time, some of our people sneaked out, dug 

Th e gs cx-ikL 



-■txr-m?: 



dried A out . 



hole, got out the material^ and brought it in 
AtilC e£" 

This^recovery of crypto-material helped a great deal because it saved us an 

and labor and set of tables, 

enormous amount of time/to reconstruct that particular code/ Bherg-were' 



p-« 3 i- ~- jI ~ 

f» . I 

^ - r »-i *Eicr< m i n 
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Ij g tan eea- of this sort every now and thaa« --HBy -the way^ the Japanese were 

o^^S- 

'Z^SUJv CA /u-KSi^A. 



worried about 



their security. B 
A A. 



-that -“something 



C^vvw^vEt// -^fcA*->ua. y«t 

aTaoTO- j teheAap~-eggrecy systems* was wrong and the only thing the* they could imagine '* 

l^A U/€A4 fy^YM\dd>4SlA 

was that there were spies all ‘round them. ■ E ba -nr. w a^ i* ■i wAi.w B w-nra ---'fcWvfc*iiM».. ^ 



the-time- 



requiring the commands to go through their quarters and look under the beds 
and into all closets, hunting for spies. Of course, that wasn't the case at 
all; we were solving their codes and ciphers because they were not secure. 

You have seen^the important World War II developments in crypto-apparatus 
and now it's time I you a bit (Jtjp^Elie new ones, conceived, developed 

and In some cases produced by the now centralized cryptologic agency of the 



•»; k- *> ♦. ► ' (»■ <:.*♦ <♦, >> 






Armed Forces, the National Security Agency. In general the trend has 
been toward these things :(i) making the machine more manageable as to size and 

weight, by miniaturization, the use of transistors and other solid state corn- 

er 

ponents, and by better packaging; ayit j rby making the machines more secure, by 

<s> 

incorporating better or more advanced crypto-principles, and^partioularly by 



simplifying the procedures. The aim of 



simpli- 



fication^ is accomplished ^wherever practicable, by eliminating as many features 
and procedures which,because of operators * errors, lead to crypto-security 



weaknesses. That is, we've been trying to make the machines as nearly 
-^©«£p \«r* ft*' j 

automatic a -e - m - pos h A W e jiad- pcacticable as regards -their -keying and functioning, 



so as to eliminate weaknesses caused by human error. We must take into account 

lo£© 

the fact that the machines have to be operated by human beings, and -hu man beings 
occasionally rwarl ■ | rfl'ffTTYi'trtT make mistakes^ t he y are prone to errors of omission 



* v i. 
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and commission. Experience has proved that in the past it has been these 



errors 




^ rm^in w.i.nM.tn in the 'cry p tos y stems and machines 



tJaeBSatoae that have made solution on a regular basis possible. This- sort— of 



prLaeti^l-expertencre' means that the keying procedures 




be made simpler. 



iwni, — if possible^ -entirely ..automatic ao -£ar -eja 'concerns the human operator and 



ufl ffT of t/he Tnarthing» anii- cywt.gm. _ -Hrimpl evl-fcifw. Can be introduced , inCTSfpOTated, 



or-applied - at jKffJA , where there jare extremely veils trained and experienced crypto- 



7 ^”' 



You understand, I’m sure^that we depend for crypto-security not on 
keeping the construction or design of the machines deep secrets. This means 
that the machines must be based upon crypto-principles such that even if the 
machines fall into enemy hands, by capture or otherwise, without possession of 
the exact key for the day, for the period, or for each individual message itself, 
the enemy can never learn by cryptanalysis the contents of the messages, or at 
least he can’t for a very large number of years. At the same time there is a real 
point in keeping the mchine/^p£»r^1*j«ry^ itself in a classified status 

as long as possible, because in the case of well-designed crypto-apparatus if 
you don’t p&sH, know what the machine looks like, or its general principles of 
ciphering, you can’t even make a start at cryptanalysis, or, to be more accurate, 
it will take a considerable length of time and more or less involved study to 
ascertain what you must know before you can spake an attack on the messages with 
some hope of success. In a nutshell, then, we keep the machines in a classified 

o4. > fa «■ -33- iCva, 

Q r-» U 




Kail-' l V > 



order to delay the enemy's real attack on the 



. •*. • fc=r — 



.chines^ Bwb^of^wiree/^thei^e'B- ^fee^othes*, rettBoa/i'-’’"®^ 

to prevent a potential ehemy from copying our machines 

✓ \ ! / 



and turning ouy'own^weapons against us. 




y / \ 

If ow^ e ^r^ ^see^plcAih^n> ofLsjome apparatus, which will "soon he 

X ' * 



For field use\we now have in place of Converter M-209 a smpCU, off-line 

u 

high security machineYes ignated the jfi^-7* It has a keyboard^ and prints the 

^ A / \ 

cipher text. For electriii power it uses any 24-volt source. This machine^ is 

now th^ work-horse for tactical cryptocommunications , and, by the way, several 

\ \, \ / 

thousands of them have been issued to our NATO allies . 

\ Y 

Next we ^ have the KW-9, an on-line or off-line teletype encipherment machine 

... ~ ~v~- 

<pr KW-2 X showed you. Here we have the netf KW-26, which is in fact becoming 

N A \ 

the work-horse of fixed station teletype long-range communication systems . It is 

/ \ 

/ V 

an on-line synchronous teletype cipher system with link-encryption, that is, so 
■ / \ 

/ \ 

far as fnemy intercept is concerned it is impossible ^o tell when the circuit 

'/ \ 

is idle and when it is carrying a message. 



1 



1 



Y 



This and\the next slide are a bit out of order but I didn't have glass 



d|a*t 



slides for them and have to use the 1 small 35 mm. ones . This onte showing the 



— te sh 

^ s \ \ \ 

!|a Tt -36 )KL-36 is the one I mentioned before as having been developed for the Marine Corps. 

/ ' " . \ 

The next^Ojpe is the pneumatic rotor machine that we think would serve »jthe needs 

( SL*rt*7 )better than the KL-36 and be far safer. 

/ 



REF ID : A63360 



-S 












Here's a Machine designated the KW-3, now undergoing, test . It is an off-line 
teleprinter cipher machine' v bnt it has all the conveniences of gn on-line machine 



\ 



\ 



and Eliminates some of the weaknesgeS'^^ the latter. The machine generates the 



X 




\ 



key as well as '.the indicators for messages, ’A^l the operator has to do is to 

\ 

•» 

type the addresg^ purifeh a starting key on the machine ,'an^then proceed to type 




» •* * 




. * . - i 

« ' * r r 
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off the plain text of the messages, whereupon a cipher tape is produced, which 

\ 

\ 

can he put on any teleprinter circuit for transmission. At the receiving center 



the operate^ puts the cipher tape into a reading head, the start button is 

\ / 



pushed, the message sets up its indicator and key, and the tape produced is the- 



plain text of the original message. The KW-3 will become the real work-horse of 

\ / 

our Armed Forces high-command cryptocommunications. 



Next I show the KW-37, designed for Navy Fox or broadcast transmissions, 

\ / 

and now undergoing service test. \It is a machine which embodies a teletype 

\ / 



printer and uses an IBM card for keying purposes. So far as the ship is 

Y 

concerned, the radio operators aboard wpn’t even see the cipher — the messages 



within the communication center aboard will be' in plain language; the ciphering 

1 ” \ 

is done elsewhere on the ship. The system is a synchronous one, meaning that 

V 

both ends of the circuit are constantly and automatically kept in step; also, 

and related to this fp.ct is the fact that the system is such' that the intercepting 

* " \ 

/ * • * c - \ 

enemy can‘t tell,vhen a message is being transmitted and 'when the circuit is 

* - . - 7 \ 

\ 

idling, givi ng what we call "link security", a very important element in 



communication security. 



v-~- , -j - 



Ne^we have the KY-3, a ciphony or telephone security equipment. It has 

very high security and excellent quality, and is not a push-to-talk machine. 

\ / 

It’s range is li-15 miles "but this can he extended vith good repeaters. 

Here's the KY-8, a smaller version of the KY-3, occupying less than one 

\ / 

cubic foot space and weighing between 10 and 15 pounds . / It's for ^.ir-to-air and 

\ / 

\ 

air-to-ground talk with hi^h security. 

/ 

\ i 

Next we see the KY-9, a ‘great improvement over its predecessors, one of 



' / 

which was the SIGSALY I mentioned a few minutes ago. It uses the vocoder 

/ 

\ / 

principle, which yields talk that is intelligible but of poor quality. What it 

\ / 

lacks in that respect it makes up by having excellent reliability. Moreover, 



you can use it on any commercial telephonic ircuit in the U.S. or circuits of 
equivalent quality abroad. For co^fiarison as to size I show you again a SIGSALY 



terminal of World War II days, which cost over ©1,000,000. The KY-9 gives 

/ \ 

equal security and costs only about $ 60 , 000 . . v 

/ ' \ 

Finally, I show you the KY-11, the crypto -portion of a microwave telephone 

■J 

system. We have this between Fort Meade and our former headquarters at the Navy 

/ ' \ 

Security Station in Washington where our COMSEC operations conducted, and 

/ \ 

where also is locked the Navy Security Group. The telephone i^icro-link is rented 

/ \ 

from the telephone company. We also have a similar link between ti^e Navy Security 



, / 

Station and Arlington Hall Station where the headquarters of the Army Security 



Agency are located. 
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T r n- tjhgf’. T 'to jug+^.-ahiaagA -yon 111 -n/vhi naJkh* ^Haphaaifc. placed on telephone 



security devices and systems, and on automatic teleprinting systems. The days 



of hand-operated devices is over, and those of semi-automatic off-line crypto- 



graphic machines are drawing to a close. And, last to he mentioned, NSA crypto- 



engineers are doing development work in civision systems — enciphered television — 



which will doubtless come into use within a few years. 



But with all these modern improvements I don't think the day has yet 



dawned when it can be said that human factors that make for crypto-insecurity 



have been altogether eliminated . Perhaps it's true that at the moment COMSEC 



j-4. 



technology can be said to be ahead of COMIHT technology; but w&fe^foreg^inegcas-faag 

A 






ju^] y tic. .ay.payn.tufl th e ■g ap - eras-mjd-per haps- be clos ed , 



males s-4^ae-^0MSES-‘"gnglneers -keep 'pacre , *^1^'that"^cpp^eFbufi . In short, it is the 



age-old battle between armor and armor-piercing projectiles. In the meantime. 



communicators must keep their guard up and enforce the rules supplied them for 



operating their crypto-equipments. 



^et me remind you^ 






4 fac~^gQ b L l< 3 wi-Bg» — (dr)- that the establishment and maintenance of communications 



security is a responsibility of command; (2) that there aren't any short-cuts to 



achieving communications security; and (3) that the rules of COMSEC must be 



followed to the letter by everybody connected, 'with COMSEC^but most especially 



by crypto-operating personnel. If these reminders are followed, the chances are 
good that you won't learn your COMSEC joules by accident! 
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y.itb tha ■■foregoiag^^eatarkg ^TarTUSS'^tnr^glOgg’T^ 'taiJt’-qg^CQMItfg -and'OQMSEC>. 

If there is any last ward or impression that I would like to leave with you 

let it he that, in my opinion, COMSEC, though less spectacular and less interesting 

^ i$&r ClCrwu*. 

than COMINT, is kipifii the more important . of the two A There are two reasons for 



this opinion. The first is that 



in the conduct of modern large-scale 

^consjEc. 



military operations, ground, sea, air, and para-military, is of the highest 

A 

Xt** C6*»*C-6&» 

without secure communications there- «an- he -little 
'Tffiirfttr «ffflrp i 7) ^ secrecy nearly every such operation is doomed. The 
second reason is one that is not so obvious. It is that your COMINT successes 
will soon he eliminated tinless the communications over which the traffic and the 
final results must pass to reach those who can use them are secure. Therefore, 
COMSEC is doubly important, omee -ancb first, to protect our own plans and move- 
ments, and c nee - "a gai n j «iear second, to protect our COMINT product and sources. I'd 

L 

therefore like to present for your consideration and rumination the following 

J> — - - 1 • 

statement of what 1*11 immodestly call Friedman's Law- -something patterned after 
Parkinson's Law: Your cryptologic coin, like any other coin, has two 

faces. If you're up against equal or even superior forces, and if the COMINT face 

« t * 1 ^ 

, - T - * • 

»■ C ’ 1 

of the coin is bright and shiny, your chances of winning are good— maybe wsd at 

» r - . - c 

* , 

times excellent; but if you let the COMSEC face of your coin become tarnished and 
dull, you'll sure as hell lose. 

i«5^Saank&ii^ you for your patience in listening to my rather lengthy 
discourse and far your courtesy in paying such careful attention to what I 
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